Take away the security and you don't even need "smart" or "poised".
No one is saying that there should not be any security.
Keep security static and you don't need smart people - just enough attempts from dullards until they chance upon a workaround, the way penicillin eventually adapts to an antibiotic.
You might want to review that. And the "dullards" still need a basic level of competence. And that basic level of competence is what is extremely rare.
But not non-existent, as history has shown.
And it will never be "non-existent". Ever. As long as airplanes are still used. So putting "non-existent" as a criteria means that you will always fail.
And you will never know if the money being spent is not being wasted because there incidents are so rare already.
So your point about "reducing risk" is meaningless.